Snykking

Snykking is a term that emerged around 2010, initially used informally by developers to describe the act of finding and exploiting security vulnerabilities in software, particularly within open-source components. The term is derived from the name of the company Snyk, which offers tools and services for developers to identify and fix security issues in their code, including dependencies.

While the term "snykking" itself is not an official security or development term, it gained traction as a shorthand for the practice of proactively identifying and addressing security flaws. This can involve using automated tools like those provided by Snyk, or employing manual security testing techniques. The underlying goal is to improve the security posture of applications by ensuring that the libraries and packages used are free from known vulnerabilities.

The concept of "snykking" emphasizes the importance of continuous security integration into the software development lifecycle. Instead of treating security as an afterthought, developers are encouraged to "snyk" their projects regularly, scanning for potential weaknesses as new code is written or dependencies are updated. This proactive approach helps mitigate risks before vulnerabilities can be exploited by malicious actors. The term highlights a shift towards developer-centric security, empowering developers with the tools and knowledge to build more secure software.